Spain

Basketball Federation of Castilla and Leon

5,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-08-28.

Rank · Sector

#65

of 351 in Individuals and Private Associations

Rank · Spain

#507

of 1,075

Rank · All fines

#1,718

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-08-28
Controller / Processor: Basketball Federation of Castilla and Leon
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).

Open original source Links to the regulator's original publication or another source.